- Our identity and contact details
1.2 We are committed to safeguarding the privacy of personal data that we either collect or process, be it through direct communication, through our website, or via our B2B Agents. Sports Adventure tours (PTY) Ltd is committed to upholding the principles of the GDPR and all personal data will be held in accordance with the regulation.
1.3 Our registered office address is 4 San Karena, Seaward, Ballito 4420, KZN, South Africa
1.4 Contact with Sports Adventure tours can be made at the following: Phone Number +27 (0) 76 323 1018, Email Address firstname.lastname@example.org
- Data Provided Via Contractual Client Relationships
2.1 In all our contractual client dealings, it is explicitly stated that it is the responsibility of the client (our B2B Agents) to seek authorisation for Sports Adventure tours to use personal data to fulfil its obligation in respect of providing the service requested. Unless otherwise instructed, Sports Adventure tours will assume this permission has been sought and given when a booking is received.
2.2 Sports Adventure tours will only ever transfer minimal customer information to any location in accordance with the GDPR lawful basis for processing. Furthermore, Sports Adventure tours warrants to the customer that it shall:
2.2.1 Only process personal data in accordance with the B2B Agents instructions, and to fulfil our obligation in respect of facilitating a booking request, making no further use of the personal data without express permission.
2.2.2 Take appropriate technical and organisational measures against unauthorised or unlawful processing of, against accidental loss or destruction of, or damage to, personal data as necessary to enable it to process the personal data in compliance with the regulation.
2.3 Furthermore, Sports Adventure tours agrees that it shall not engage any third party to process personal data on its behalf unless the B2B Agent has obtained consent from the customer, or the customer has consented, and:
2.4 Sports Adventure tours will take all reasonable steps in accordance with all relevant legal responsibilities to ensure the reliability of its employees who have access to personal data of customers. If Sports Adventure tours receives a complaint, notice, request or communication which relates directly or indirectly to the processing of personal data, or to Sports Adventure tours ’s compliance with the GDPR, we commit to act within the specified timescales set out and take the necessary steps in assisting with the request.
- Information we hold
3.1 Sports Adventure tours shall maintain a record of all categories of processing activities carried out including data we hold to conduct our business, and the data of our employees. The record of processing activities contains:
3.1.1 The purpose of the processing,
3.1.2 A description of the categories of data subjects and the categories of personal data processed,
3.1.3 The categories of recipients to whom the personal data have been or will be disclosed including recipients in other countries or international organisations,
3.1.4 Where possible, the envisaged time limits for erasure of the different categories of data
3.1.5 Where possible, a general description of the technical and organisational security measures
3.1.6 The name and contact details of third-party processors acting on behalf of Sports Adventure tours
- Information we collect
4.1 Sports Adventure tours may collect, receive, store and use the following kinds of personal data:
4.1.1 Customer information provided to us, by customers and/or B2B Agents, for Sports Adventure tours to fulfil a booking request.
4.1.2 Any other information sent to Sports Adventure tours by customers and/or B2B Agents, that may be pertinent to the fulfilment of a booking request. This information may extend for instance to the names of family members, a photocopy of a passport, child ages/dates of birth, or details of disabilities.
5.1 In addition to the disclosures outlined in this Privacy Notice, Sports Adventure tours may disclose personal data: to the extent that we are required to do so by law, in connection with any legal proceedings or prospective legal proceedings, to establish, exercise or defend our legal rights, including providing information to others for the purposes of fraud prevention.
- Individual Rights
6.1 The Right to be informed
6.1.2 Regarding personal data given to Sports Adventure tours by its customers and/or B2B Agents. It is the responsibility of the B2B Agent to inform the customer about any extended processing arrangements in the booking activity. Customers booking directly via our website www.sportsadeventuretours.com consent to the use of data that they submit on acceptance of the terms and conditions.
6.2 The right of access, rectification, erasure, restriction of processing and portability of your data
6.2.1 The GDPR clarifies that the reason for allowing individuals to access their personal data is so that they are aware of and can verify the lawfulness of the processing. In terms of core business activity, Sports Adventure tours is a Data Processor, processing the personal data of customers in order to provide a service. The customer personal data however is controlled by the customers submission and/or B2B Agent.
6.2.2 Sports Adventure tours commits to responding to customers and/or B2B Agents should a request for access to, rectification of, erasure of, restriction of processing or data portability be made. For details on how to make such a request, please see section ‘Data Subject Requests’ below.
6.2.3 If a customer has provided consent to the Sports Adventure tours and/or B2B Agent for the processing of their data, they have the right (in certain circumstances) to withdraw that consent at any time. This will not affect the lawfulness of the processing before consent was withdrawn. Sports Adventure tours will endeavour to act upon any request made by a customer or B2B Agent to cease the processing of a customer’s data, in the event one is made.
6.2.4 You have the right to lodge a complaint, if you believe we have not complied with the requirements of the CPA or GDPR with regard to your personal data. Please visit the relevant website for instructions on how to do this.
- Subject Access Requests
7.1 Sports Adventure tours commits to responding to Subject Access Requests within 1 calendar month as specified in the GDPR. When making a Subject Access Request, the following steps must be followed:
7.1.1 The request must be made in writing
7.1.2 The requester must supply information to prove who they are (to eliminate risk of unauthorised disclosure)
7.1.3 The requester must supply appropriate information to help Sports Adventure tours to locate the information they require.
7.2 Upon receipt of a request, Sports Adventure tours will provide:
7.2.1 Information on whether the personal data is processed
7.2.2 A description of the data, purposes and recipients
7.2.3 A copy of the data
7.3 Written Data Subject Requests can be made at the following:
7.3.1 Written Data Subject Requests can be made at the following:
7.3.2 Email Address email@example.com